You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Download KillBox,unzip/extract it to your desktop.http://download.bleepingcomputer.com/spyware/KillBox.zipStart up Killbox and place a check in 'Delete on Reboot'.In the 'Full path of file to delete' box,copy and paste:C:\WINDOWS\SYSTEM32\winhoq32.dllThen press the red button with the white cross.It will then provide a window for your to confirm the delete.Next it will ask if you now wish to reboot,select YES.Allow it to reboot.If it does'nt reboot automatically,reboot manually.

Have Hijack This fix the following by placing a check in the appropriate boxes and selecting 'Fix checked'. Make sure all browser and all Windows Explorer windows are closed before fixing:O4 - HKLM\..\Run: [{3CCCA01D-0707-1033-0310-031025200001}] "C:\Program Files\Common Files\{3CCCA01D-0707-1033-0310-031025200001}\Update.exe" mc-110-12-0000272O4 - HKLM\..\Run: [IpWins] C:\Program Files\Ipwindows\ipwins.exeO20 - Winlogon Notify: winhoq32 - C:\WINDOWS\SYSTEM32\winhoq32.dllExit Hijackthis.

Reboot your computer into SAFE MODE" using the F8 method. To do this,restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys on your keyboard to navigate and select the option to run Windows in "Safe Mode".

Don't be concerned about that,thats perfectly normal,it's just saying the file winhoq32.dll is missing,you deleted it with Killbox.

Please download/install AVG Anti-Spyware 7.5.Welcome TrailriderPlease follow these instructions carefully.Launch/start up AVG Anti-Spyware.On the main page click the 'Update' tab,and then 'Start Update'.Once the updates have been installed,do the following:Select the 'Scanner' icon at the top of the screen, then select the 'Settings' tab. Once in the 'Settings' screen,under 'How to act?',then under 'Set default action for detected malware to:', click on 'Recommended actions',then click on 'Quarantine'.Under 'Reports' select 'Automatically generate report after every scan' and unselect 'Only if threats were found'. Exit AVG Anti-Spyware,don't run the scan just yet.

You might want to print/copy the following as you need to be in Safe Mode from here on.

Reboot your computer into SAFE MODE" using the F8 method. To do this,restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys on your keyboard to navigate and select the option to run Windows in "Safe Mode".

Have Hijack This fix the following by placing a check in the appropriate boxes and selecting 'Fix checked'. Make sure all browser and all Windows Explorer windows are closed before fixing:

Find and delete if present:C:\DOCUME~1\ADMINI~1\MYDOCU~1\MCROSO<-Folder with name beginning with MCROSO

Still in Safe Mode launch AVG Anti-Spyware.Click the 'Scanner' icon at the top.To start the scan click on 'Complete System Scan'. Please be patient,it takes a while for the scan to finish.

Once the scan is complete,do the following.If AVG Anti-Spyware detected any infected objects:,click on 'Apply All Actions'.Next click on 'Save Report'.Copy and paste that report into your next reply.The report can be found under the 'Reports' tab at the top.Close AVG Anti-Spyware when you've done.Reboot normally.

Create a new System Restore Point:Help if needed: Click on Start/All Programs/Accessories/System Tools/System Restore. In the System Restore window,click "Create a Restore Point" button,then click 'Next'. In the window that appears,enter a description,then click on "Create", then "Close". The date and time is created automatically.

You should now go to Windows Update and install any available critical/high priority updates.

Should I delete those viruses in the AVG Anti-Spyware Quarantine section?

Certainly,go ahead

This thread will now be closed. If you need this topic reopened, please contact a member of the HJT Team and we will reopen it for you. Include the address of this thread in your request. If you should have a new issue, please start a new topic. This applies only to the original topic starter. Everyone else please begin a New Topic.